g2294994

3 ms·

1. 1.▲
   by g2294994 8y ago

   This is not a widespread issue by any means. All the reputable online password managers that I have tested so far in the last several years haven't attempted to access any of the honeypot accounts. I'm a pentester by day so this i
2. 2.▲
   by g2294994 8y ago

   This type of behavior one would expect from a sketchy site so these early test results are somewhat surprising to be honest. I will be doing further testing in the next few weeks by throwing a few more honeypot accounts in different account
3. 3.▲
   by g2294994 8y ago

   Just for the heck of it I created a test account with their password manager with a few honeypot accounts on a VPS server. Within 2 hours one of the "honeypot" SSH accounts I put in my password manager was accessed with the creds